CPA Australia Mobile App Privacy Policy

1. WHO WE ARE

The CPAA mobile software application ("App") is owned and operated by CPA Australia Ltd (CPAA). In this privacy policy, the terms "we", "our", and "us" are used to refer to CPAA.

We take your privacy very seriously. We ask that you read this privacy policy ("Policy") carefully as it contains important information about how we collect and use your personal information and how we meet our legal obligations in applicable privacy and data protection laws in the countries in which we operate or where our members are located and who use the App (the "Privacy Laws").

For the purposes of applicable Privacy Laws, CPA Australia Ltd (Level 20, 28 Freshwater Place Southbank VIC 3006) is the controller of your personal information.

This Policy applies to our processing of personal information that we collect in connection with your registration and use of the App. This Policy supplements the CPAA privacy policy. 

2. WHAT PERSONAL INFORMATION DO WE COLLECT THROUGH THE APP AND HOW?

We collect personal information about you when you download, register and use the App on your mobile device. The information we collect includes your:

• contact details, member identification and designation;
• personal communications preferences;
• employment details and history;
• education, professional development and professional qualifications including academic results;
• testimonials and feedback; and
• information about your location (where you have enabled this feature).
  

We will also collect personal information when you use the App which includes:

• information about your use of the App (such as the in-app content you engage with, the links you click through, and your other interactions in the App);
• information about interests and preferences in relation to the App; 
• information you share when you make an enquiry, give us feedback, report a problem or otherwise contact us through the App; 
• billing and payment information such as your payment and transaction details (which we collect from our third party payment processors who process payments on our behalf);
• information collected using cookies, analytics tools and similar tracking technologies such as web beacons and pixels, including your IP address – please see the CPAA privacy policy for more information; and
• information about your mobile device (such as device type, the type of mobile browser that you are using, the mobile operating system that you are using, mobile network information, the time zone setting).

It is up to you to decide the personal information you choose to share with us.  But if you do not provide us or agree to provide us with your personal information, we may not be able to provide you or offer you the full functionality of our App, communicate with you or respond to your enquiries.

3. HOW WE USE YOUR PERSONAL INFORMATION

The main purposes for which we use your information are to validate your CPAA membership for account creation, enable you to register and use the App, to inform you about relevant CPAA events, courses and promotions, to respond to your inquiries made through the App and to provide App and member support.

We also use your personal information for the following purposes:

• De-identified and aggregated reporting – to produce de-identified and aggregated reports to allow us to monitor key App usage metrics overall such as total users, inactive users, user demographics. 
• Marketing – unless you tell us not to, to identify and promote events, courses, thought leadership material and promotions (offered by CPAA, our partners and third parties) we believe may be of interest to you, based on your eligibility criteria and your use of the App. 
• General administration - to allow us to customise the App and its content to your preferences and to notify you of any changes to the App or to our services that may affect you and to improve App performance. 
• Compliance with legal obligations – to comply with our legal obligations and assist government and law enforcement agencies or regulators.

4. BASES FOR PROCESSING PERSONAL INFORMATION

Some Privacy Laws require us to have a "lawful basis" to be permitted to process your personal information. 

In general, we process your personal information with your consent. You may withdraw consent at any time after you have given it. This would not affect the lawfulness of our prior use of that information. In certain situations, however, withdrawing consent might impact our ability to provide our App to you, or otherwise engage with or assist you.

We also process your personal information because it is necessary for the purposes of entering into or performing a contract with you, such as to register you and provide you with the App and provide member services to you through the App. 

Alternatively, we may need to collect and use personal information for our legitimate interests to provide our services to or otherwise engage with you and to develop our business, but only in circumstances where these interests are not outweighed by the need to protect your privacy.

5. DIRECT MARKETING & OPTING OUT 

We may, with your consent, use your personal information to contact you from time to time (by email, phone, push notifications or in App marketing) to tell you about new CPAA events, courses and special offers that we believe may be of interest to you. They may be offered by us or our business partners. 

You can opt out of receiving push notifications from us through the App at any time by turning your push notifications off for the App in your phone settings or changing your profile settings in the App. 

Where you have consented to receiving direct marketing communications from us, your consent will remain current until you advise us otherwise. However, you can, at no cost, opt out or change your communication preferences at any time. Our communications will include an opt out option. If you are a member you can manage your communication preferences by logging into your CPA Australia account. The App may contain links to websites or other apps which we or our partners own, or websites or apps of our partners or third parties. If you follow any of these links, the websites, apps and services provided through them will have their own privacy policies and terms of use. We do not accept any responsibility or liability for these or their collection and use of any personal information as a result of your use of the App. Please review the relevant privacy policies and terms of use before providing any personal information, or using their websites, apps and services.

6. WHO DO WE DISCLOSE YOUR PERSONAL INFORMATION TO AND WHY

We may disclose your personal information to our corporate affiliates, service providers (based in Australia and overseas), and other partners who process it for us, based on our instructions, and in compliance with this Policy and any other appropriate confidentiality and security measures. 

Specifically, we share personal information with our:

• IT service providers (including our app and platform provider, cloud hosting provider, diagnostics service provider);
• service and support providers (including customer support providers, third payment processing providers such as Stripe.com and Paypal);
• marketing, research and data analytics services providers;
• our professional advisors (including without limitation tax, legal or other corporate advisors who provide professional services);
• to a purchaser or potential purchaser of our business (but only where it is necessary to do so and under appropriate confidentiality obligations); or
• if we are required or authorised by applicable laws.

7. INTERNATIONAL TRANSFERS

We may transfer personal information we collect outside of Australia or of the country in which you reside onwards to another country for one or more of the purposes outlined in this Policy. For example, we use contracted service providers to whom me may need to transfer some of your information to deliver services to us and support the operation of the App. These service providers are located in Malaysia, India, the United States, countries in the European Union, Singapore and Taiwan. Your personal information that we collect through the App may also be accessible by our related entities in China and Malaysia. 

We take all reasonable steps to ensure your information is protected by carefully selecting our service providers who we only permit to process it at our direction For example, if personal information we collect is transferred from an EU country to countries that do not have an adequacy decision, we will work to implement an appropriate transfer solution, such as standard contractual clauses approved by the EU Commission.

8. STORAGE AND RETENTION OF PERSONAL INFORMATION

We store the information we collect through the App as digital records in cloud or other types of networked or electronic storage. 

We take reasonable steps to implement appropriate technical and organisational controls to protect your personal information that we hold from unauthorised use, disclosure and access. 

If you delete your account on the App, or you delete the App from your phone, we will continue to hold personal information about you as a member of CPA Australia. For more information about how we store and retain your personal information, please see our Privacy Policy | CPAA.

9. YOUR RIGHTS

Depending on which country you are based in when you registered for the App or use the App, you may have certain legal rights in relation to your personal information that we process about you, which include (but may not be limited to):

• To be informed: the right to be informed about the personal information we collect and hold about you;
• Access: the right to access the personal information we hold about you;
• Correction: the right to require us to correct any inaccurate or incomplete personal information we hold about you;
• Deletion/Erasure: the right to ask us to delete the personal information we hold about you;
• Restrict processing: the right to restrict our processing of the personal information we hold about you;
• Portability: the right to receive the personal information you have given us, in a structured, commonly used and machine readable format and to transfer this personal information to another organisation, at your request;
• Object to processing: the right to object to our processing of the personal information we hold about you where our lawful basis is for the purpose of our legitimate interests;
• Automated processes: the right to not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you;
• Withdraw consent: the right to withdraw your consent, where we are relying on it to use your personal information; and
• Complain: the right to complain about our handling of your personal information if you believe we have breached our privacy obligations.

For more information about the rights you have or to request to exercise your rights, please update your preferences in your CPAA member account or contact us  using the details in section 11 below.

We will respond to these requests as soon as possible and consistently with applicable requirements of the Privacy Laws.

10. CHILDREN

Our App is not intended for children (who are individuals under 21 years of age in the UAE and under 18 years of age elsewhere), and we do not knowingly collect personal information from children. 

If we learn we have collected or received personal information from a child) without verification of parental consent, we will delete that information. If you believe we might have any data from or about a child, please contact us using the details below.

11. COMPLAINTS AND CONTACT DETAILS

If you have a privacy enquiry or concern, are seeking to exercise your statutory rights, or you wish to complain about how we have handled your personal information, you can contact our Privacy Officer by:

• email: [email protected] and, if you are in Malaysia, also email [email protected]
• telephone: 1300 73 73 73 (within Australia), +61 3 9606 9677 (outside of Australia)
• mail: CPA Australia, Level 20, 28 Freshwater Place, Southbank, Victoria 3006, Australia.

We encourage you to contact us first if you have any queries, comments or concerns about the way we handle your personal information. However, if you are not satisfied with our handling of any request by you in relation to your rights or concerns, you also have the right to make a complaint to the applicable regulator. For further information on how to contact the supervisory authority please contact us  using the details above. 

Please see our Privacy Policy | CPAA for more information.

12. CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes to how we handle personal information or to the types of personal information we collect and process or to meet our legal obligations.

Any changes to our Policy will be notified to you through the App, and the latest version will be available at all times within the App.

This Privacy Policy was last updated: July 2025